Block Microsoft Account in MS Store Windows 10 (1511 tested)

After my last blog – Only display the private store within the Windows Store app (Windows 10, 1511) – there came a lot of inputs, that users can still install APPs with their private Microsoft Account. This is true, because the described setting is only deactivating the menus in the store app. So a user can add his Microsoft Account and add APPs (not as easy as usual, because he cannot see them directly in the APP).

BUT, there is a way through MDM or WMI to deactivate the Microsoft Account for Store APPs. Take care, this is not the setting “Users can’t add or log on with Microsoft accounts” (Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options)! This only prohibits to login with a Microsoft Account to the Windows 10 device!

 

The how to do I found here: http://blog.scottbreen.tech/2016/02/24/block-microsoft-accounts-windows-10/. Thanks Scott for the scripts and descriptions!

Add this powershell commands with SYSTEM RIGHTS (run it through SCCM or psexec…) to disable Microsoft Accounts in the Store APP:


$namespaceName = “root\cimv2\mdm\dmmap”

$className = “MDM_Policy_Config01_Accounts02”

# Create a new instance for $className

New-CimInstance -Namespace $namespaceName -ClassName $className -Property @{ParentID=”./Vendor/MSFT/Policy/Config”; InstanceID=”Accounts”; AllowMicrosoftAccountConnection=0; AllowAddingNonMicrosoftAccountsManually=0}


To remove the settings:


$namespaceName = "root\cimv2\mdm\dmmap"
$className = "MDM_Policy_Config01_Accounts02"
Get-CimInstance -Namespace $namespaceName -ClassName $className | remove-CIMInstance


As soon you disabled the Micrsoft Account, try to add an account, which is still possible, but will end with an error:

In the store APP, choose the people icon

image

Choose “Add account”

image

Choose “Microsoft Account”

clip_image006

Enter your Microsoft Account Username and Password

clip_image008

This will end in an error, also when the login informations are correct

clip_image010

 

TAKE CARE, this will influence other store APPs like the camera APP and others! I have not yet tested all APPs Smile.

If this setting is really needed is not my decision Smile.

Chris

Advertisements

One comment

  1. SomeAdmin

    Brilliant! Finally a (solution) workaround for this very annoying issue…
    Still hoping Microsoft implements some GPO to fix this setting.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s